fixes

nixos/celestia/configuration.nix

@@ -33,6 +33,8 @@ in {
   sops.defaultSopsFile = ./secrets.yaml;
   sops.secrets."acme.env" = {};
   sops.secrets."tailscale-auth-key" = {};
+  sops.secrets."act-runner-token" = {};
+  sops.secrets."photoprism-password-file" = {};
 
   imports = [
     ./hardware-configuration.nix
@@ -167,8 +169,8 @@ in {
           public = "yes";
           "guest only" = "yes";
           writable = "yes";
-          "force create mode" = "0666";
-          "force directory mode" = "0777";
+          # "force create mode" = "0666";
+          # "force directory mode" = "0777";
         };
         video = {
           path = "/tank/video";
@@ -176,8 +178,9 @@ in {
           public = "yes";
           "guest only" = "yes";
           writable = "yes";
-          "force create mode" = "0666";
-          "force directory mode" = "0777";
+          "force group" = "nas";
+          # "force create mode" = "0666";
+          # "force directory mode" = "0777";
         };
       };
     };
@@ -186,8 +189,29 @@ in {
       autoScrub.enable = true;
     };
 
+    gitea-actions-runner.instances = {
+      runner1 = {
+        enable = true;
+        name = "celestia";
+        url = "https://git.fuckwit.dev";
+        tokenFile = config.sops.secrets."act-runner-token".path;
+        labels = [
+          "native:host"
+        ];
+        hostPackages = with pkgs; [
+          bash
+          coreutils
+          curl
+          wget
+          gnused
+          gitMinimal
+        ];
+      };
+    };
+
     nginx = {
       enable = true;
+      clientMaxBodySize = "500m";
       virtualHosts = makeVirtualHosts [
         {
           subdomain = "jdownloader";
@@ -217,6 +241,10 @@ in {
           subdomain = "homepage";
           port = 8082;
         }
+        {
+          subdomain = "photoprism";
+          port = 2342;
+        }
       ];
     };
 
@@ -257,17 +285,21 @@ in {
       enable = true;
       group = "nas";
       dataDir = "/var/lib/sonarr";
-      # package = pkgs.sonarr.override {
-      #   version = "4.0.0.748";
-      #   src = lib.fetchurl {
-      #     url = "https://download.sonarr.tv/v4/main/${version}/Sonarr.main.${version}.linux-x64.tar.gz";
-      #     hash = "";
-      #   };
-      # };
     };
 
     jellyfin.enable = true;
 
+    photoprism = {
+      enable = true;
+      originalsPath = "/tank/images/pictures";
+      importPath = "/tank/images/import";
+      passwordFile = config.sops.secrets."photoprism-password-file".path;
+      settings = {
+        PHOTOPRISM_ADMIN_USER = "root";
+        PHOTOPRISM_DEFAULT_LOCALE = "de";
+      };
+    };
+
     homepage-dashboard = {
       enable = true;
 
@@ -419,7 +451,7 @@ in {
       script = ''
         while read -r evt file; do
           ${pkgs.coreutils}/bin/chown ${user}:${group} "$file"
-          ${pkgs.coreutils}/bin/chmod 755 "$file"
+          ${pkgs.coreutils}/bin/chmod 775 "$file"
         done < <(${pkgs.inotify-tools}/bin/inotifywait -e create,move -m -r --format '%e %w%f' ${path})
       '';
     };